Lucene search
RedosROS-20240731-03HistoryJul 31, 2024 - 12:00 a.m.
ROS-20240731-03
2024-07-3100:00:00
redos.red-soft.ru
4
gstreamer
mxf
file parser
vulnerability
buffer
memory
exploitation
remote attacker
arbitrary code
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
29.7%
A vulnerability in the MXF file parser of the Gstreamer multimedia framework is related to an operation exceeding the boundaries of a buffer in memory.
buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| redos | 7.3 | x86_64 | gstreamer1-plugins-bad-free | < 1.16.3-2 | UNKNOWN |
Related
alpinelinux
alpinelinux
CVE-2023-44446
2024-05-03 03:16:00
nessus
nessus
Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2023-7841)
2023-12-19 00:00:00
CentOS 7 : gstreamer1-plugins-bad-free (RHSA-2024:0013)
2024-01-09 00:00:00
RHEL 7 : gstreamer-plugins-bad-free (RHSA-2024:0279)
2024-01-17 00:00:00
rocky
rocky
gstreamer1-plugins-bad-free security update
2024-01-09 04:07:10
veracode
veracode
Use After Free
2023-11-30 18:06:34
centos
centos
gstreamer security update
2024-01-26 18:07:56
gstreamer1 security update
2024-02-05 19:26:26
openvas
openvas
Debian: Security Advisory (DLA-3673-1)
2023-11-30 00:00:00
openSUSE: Security Advisory for gstreamer (SUSE-SU-2024:0793-1)
2024-03-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0779-1)
2024-03-07 00:00:00
zdi
zdi
redhatcve
redhatcve
CVE-2023-44446
2023-11-17 10:16:41
redhat
redhat
(RHSA-2023:7874) Important: gstreamer1-plugins-bad-free security update
2023-12-18 07:10:42
(RHSA-2023:7841) Important: gstreamer1-plugins-bad-free security update
2023-12-14 09:19:11
(RHSA-2023:7875) Important: gstreamer1-plugins-bad-free security update
2023-12-18 07:10:43
oraclelinux
oraclelinux
gstreamer1-plugins-bad-free security update
2024-01-02 00:00:00
gstreamer-plugins-bad-free security update
2024-01-18 00:00:00
gstreamer1-plugins-bad-free security update
2023-12-19 00:00:00
vulnrichment
vulnrichment
ubuntucve
ubuntucve
CVE-2023-44446
2023-11-17 00:00:00
cve
cve
CVE-2023-44446
2024-05-03 03:16:00
almalinux
almalinux
Important: gstreamer1-plugins-bad-free security update
2023-12-14 00:00:00
Important: gstreamer1-plugins-bad-free security update
2023-12-13 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2346
2024-02-20 08:36:43
Advisory ROSA-SA-2024-2344
2024-02-20 08:34:56
debian
debian
[SECURITY] [DLA 3673-1] gst-plugins-bad1.0 security update
2023-11-28 22:52:14
[SECURITY] [DSA 5565-1] gst-plugins-bad1.0 security update
2023-11-25 14:46:20
osv
osv
Important: gstreamer1-plugins-bad-free security update
2024-01-09 04:07:10
Important: gstreamer1-plugins-bad-free security update
2023-12-14 00:00:00
gst-plugins-bad1.0 - security update
2023-11-28 00:00:00
nvd
nvd
CVE-2023-44446
2024-05-03 03:16:00
debiancve
debiancve
CVE-2023-44446
2024-05-03 03:16:00
cvelist
cvelist
fedora
fedora
[SECURITY] Fedora 39 Update: gstreamer1-plugins-good-1.22.7-1.fc39
2023-11-19 01:26:32
[SECURITY] Fedora 39 Update: gstreamer1-plugins-base-1.22.7-1.fc39
2023-11-19 01:26:32
[SECURITY] Fedora 39 Update: gstreamer1-plugin-libav-1.22.7-1.fc39
2023-11-19 01:26:31
amazon
amazon
Important: gstreamer1-plugins-bad-free
2023-11-29 22:19:00
gentoo
gentoo
GStreamer, GStreamer Plugins: Multiple Vulnerabilities
2024-06-28 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0523
2023-12-01 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
ubuntu
ubuntu
GStreamer Bad Plugins vulnerabilities
2023-11-29 00:00:00
mageia
mageia
Updated gstreamer packages fix many security vulnerabilities
2023-12-22 14:04:51
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
29.7%
Related for ROS-20240731-03